Control device for controlling an alarm output and method for controlling an alarm output as well as medical device

ABSTRACT

A control device, controlling an alarm output, includes a data network interface, with a signaling interface for outputting a control signal indicating a request for an acoustic and/or optical alarm signal a memory unit and a processor. The data network interface is configured to receive a group message indicating a sender identity and a presence of an alarm state. The memory unit provides a first data set, which indicates a list with potential sender identities, as well as further a second data set, which indicates one or more alarm output time periods. The processor is configured to operate a timekeeping function, and to output the control signal via the signaling interface as a function of an agreement between the sender identity with one of potential sender identities, and as a function of a comparison of a current value of the timekeeping function with data of the second data set.

CROSS REFERENCE TO RELATED APPLICATIONS

This application claims the benefit of priority under 35 U.S.C. § 119 ofGerman Application 10 2015 016 316.7 filed Dec. 17, 2015, the entirecontents of which are incorporated herein by reference.

FIELD OF THE INVENTION

The present invention pertains to a method for controlling an alarmoutput and a control device for controlling the output of an alarm, witha data network interface and with a signaling interface for outputting acontrol signal. The present invention further pertains to a medicaldevice for analyzing physiological patient data or for monitoring anoperating state of at least one device having an alarm signal outputunit and an input unit.

BACKGROUND OF THE INVENTION

A scenario is known in which a medical device monitors physiologicalpatient data and controls an output of an alarm signal by means of acomparison of the physiological patient data with reference values. Thealarm signal may be outputted here by the medical device itself, or elsea request message for requesting the output of an alarm signal may besent by the medical device to another device. As an alternative formonitoring physiological patient data, status data can be monitored,which indicate an operating state of other technical devices or partialdevices on or in the medical device; for example, the falling off of anelectrode or an increase in the pressure in a tube can be detected andindicated. An alarm signal can likewise be detected by comparing thestatus data with corresponding reference values.

US 2005/0271186 A1 discloses a system in which a central unit is used todetermine, by a configuration of a user, which telephone shall bereached by means of a network at which times and in case of whichoccurring events, so that the telephone will then output an output of asignal or an alarm signal. US 2007/0229249 A1 shows a system in which analarm is outputted in a coordinated manner by an alarm messenger, inwhich alarm signals are sent to different receiving units based on dataof a data bank. Thus, a concept, in which a central unit is configuredto subsequently send different alarm signals to different output unitsat different times, is proposed in both prior-art documents.

SUMMARY OF THE INVENTION

An object of the present invention is to execute the output of alarmsignals in a clinical setting by means of a plurality of devices in acoordinated manner and to make the output of alarm signals preferablypossible in the process to minimize alarm signals to be outputted to thedifferent devices while an alarming function is, in principle, ensuredat the same time.

The present invention pertains to a control device for controlling theoutput of an alarm, having a data network interface, a signalinginterface for outputting a control signal, which indicates the requestfor the output of an acoustic and/or optical alarm signal, at least onememory unit, at least one processor, as well as an alarm output unit foroutputting an optical and/or acoustic warning, which is configured tooperate a timekeeping function, the data network interface beingconfigured to receive a group message, which indicates the senderidentity of a sender of the group message and which further indicatesthe presence of an alarm state, wherein the memory unit provides a firstdata set, which indicates a list with potential sender identities, andfurther a second data set, which indicates one or more time periods,during which an alarm signal shall be outputted, wherein the processoris further configured to output the control signal via the signalinginterface as a function of an agreement between the sender identityindicated in the group message with one of the potential senderidentities as well as further as a function of a comparison of a currentvalue of the timekeeping function with data of the second data set.

The control device has an input interface for receiving an input signal,which indicates the acknowledgment of the alarm signal by a user,wherein the processor is further configured to suppress the output ofthe control signal in the presence of the input signal and further tosend a status message, which indicates the acknowledgment of the alarmsignal by the user, to the sender of the group message via the datanetwork interface. The present invention is advantageous because it ispossible hereby to completely or at least temporarily suppress theoutput of the control signal after acknowledgment of the alarm signal onan input unit by the user in order to not needlessly task the acousticand/or optical attention of the clinical staff any longer. Further, bysending the status message, the sender of the group message is informedthat a user has acknowledged the alarm by an input on the controldevice.

The control device has an alarm signal output unit itself, which outputsan optical and/or acoustic alarm signal as a function of the controlsignal. The control signal is preferably sent as a data signal by thecontrol device to another device, and this additional device will then,in turn, be able to perform the output of an optical and/or acousticalarm signal, depending on the control signal, via its own alarm signaloutput unit. The second data set indicates respective time periods witha respective beginning and a respective end of the time period. Thecontrol device suppresses the output of the control signal preferably nolater than when this is indicated by the time periods of the second dataset.

The group message in the sense of this application is a data networkmessage. Such a group message as a data network message is sent to oneor more network units of a group of network units. The group of networkunits is then preferably defined by group identification data, e.g., amulticast address or a set of a plurality of respective data networkaddresses of respective network units. A group message in the sense ofthis application is consequently a data network message of the type of abroadcast message, an anycast message, a multicast message or one ormore unicast messages.

The group message may be sent, for example, by a patient monitor or amedical device for analyzing physiological patient data or for analyzingoperating states within a data network, in order to inform the controldevice according to the present invention that the output of an alarmshall be performed or actuated by the control device. The output of thealarm may be executed on the control device itself or preferably on adevice that is in communication connection with it and hence it does notconsequently have to be performed on the medical device itself, which islocated directly at the hospital bed. Thus, the patient is notneedlessly disturbed or bothered by the alarm. The control device may behere, for example, a so-called pager for a clinician, a smartphone of aphysician or else an alarm unit in a room for nursing staff.

The control device according to the present invention for controllingthe output of an alarm is advantageous because the output of the controlsignal does not generally take place as a request for outputting anacoustic and/or optical alarm signal in case of indication or thepresence of the alarm state, but also as a function of the time periodsindicated in the second data set. Therefore, an actual alarming is onlyperformed when there currently is a time period at which the controldevice shall, indeed, perform the outputting of an alarm; this takesplace by a comparison of the current value of the timekeeping functionwith the time periods indicated in the second data set. The controldevice can thus be configured by the second data set in a simple mannerin order for the control device not to generate or actuate theoutputting of the alarm signal by the control signal for all times ortime periods. As a result, the control device can be assigned by, e.g.,the second data set to a class of alarming devices because, e.g.,different control devices may provide respective different second datasets for indicating respective different time periods of a particularalarming activity. If the output of the control signal is preferablysuppressed at the latest when this is indicated by the time periods ofthe second data set, it is achieved as a result that a first controldevice of a first alarm class or device group suppresses the output ofthe alarm signal also when a user made no input on the control device.The output of an alarm can now take place automatically on anothercontrol device of another alarm class or device group, and the totalnumber of alarm signals sent is reduced by suppressing the output of analarm on the first control device.

The group message preferably further indicates a type of an alarm stateby means of a data element, the second data set further indicating anassignment of the time periods to types of alarm states, and theprocessor being configured to take into account the type of the alarmstate, which type is indicated in the group message, in the course ofthe comparison. This configuration of the present invention isadvantageous because the output of the alarm can be controlled as afunction of an alarm type, so that different time periods of outputtingthe alarm signal can be provided for different types of alarms.

The processor is preferably further configured to check, based on astatus information, whether the control signal can reach an alarm signaloutput unit or not, and further to send a status message, whichindicates the successful actuation of the alarm signal output unit, tothe sender of the group message via the data network interface in caseof a positive result of the checking and in case the control signalstarts being outputted. This configuration of the present invention isadvantageous because the control device can check, based on the statusinformation, whether the output of an alarm via an alarm signal outputunit is possible in the first place and further it can send a statusmessage to the sender of the group message in case of a positive resultof the checking, said status message informing the sender that an alarmsignal is outputted to an alarm signal output unit.

The data network interface is preferably further configured to receive astatus message, which indicates whether another control device iscurrently successfully actuating an alarm signal output unit assigned toit, the processor being further configured to output the control signalvia the signaling interface as a function of the presence of the statusmessage. This configuration of the present invention is advantageous,because it is made possible hereby that different control devices ofdifferent alarm classes can be provided, which can perform a respective,own alarm output at different time periods, but, further, a controldevice does not perform the outputting of the control signal forrequesting the output of an alarm signal if the alarm is alreadyoutputted on another control device; this is indicated by the statusmessage. It is made possible hereby that, e.g., two different controldevices of different alarm classes can have common, overlapping timeperiods for alarming, but the two control devices do not cause alarmingsimultaneously in case of overlapping time periods, but only one ofthese two control devices will cause or actuate an alarming, while theother control device suppresses its output of an alarm or alarmactuation during the overlapping time period. It is made possible herebythat the actual number of control devices of different alarm classes,which indeed actuate the output of an alarm for common, overlapping timeperiods, is minimized, it is ensured at the same time that at least onecontrol device of one alarm class will actuate the output of an alarmduring this overlapping time period.

The data network interface is preferably configured, furthermore, toreceive a status message, which indicates that another control devicehas detected an acknowledgment of an alarm signal by a user, theprocessor being further configured to suppress the output of the controlsignal in the presence of the status message. This configuration of thepresent invention is advantageous, because the control device can trustthat a user has already acknowledged at another control device an alarmsignal outputted there, so that the number of acoustic and/or opticalalarm signals can be minimized by suppressing the output of the controlsignal on the control device. The data network interface is preferably adata network interface to a first data network, the signaling interfacebeing further a second data network interface to a second data network,and the control signal being a data signal. This configuration of thepresent invention is advantageous because the control device can assumea so-called gateway functionality, in which the control signal can besent in the form of a data signal to another unit or to another networkparticipant, preferably a pager, through the second data network. Thealarm output unit for outputting the alarm signal or alarm signals canthen be provided at this additional unit or at this additional networkparticipant of the second data network. It is made possible hereby tocoordinate the outputting of the alarms, as was described above, even ifthe control device itself does not have an alarm signal output unit foroutputting the alarm signal, but if the alarm signal output unit isprovided at the additional unit or the additional network participant.

The memory unit preferably further provides a third data set, whichindicates a list of network participants of the second data network.This configuration of the present invention is advantageous because thecontrol device can now access the provided list of the networkparticipants of the second data network in order to decide to whichnetwork participant of the second data network it will send the controlsignal in the form of a data signal.

Further, a method for controlling the output of an alarm is proposed,which comprises the receipt of a group message, which indicates thesender identity of a sender of the group message and further thepresence of an alarm state; the provision of a data set, which indicatesa list with potential sender identities, and further of a second dataset, which indicates time periods, during which an alarm signal shall besent; the operation of a timekeeping function; the output of a controlsignal, which indicates a request for an acoustic and/or optical alarmsignal, as a function of an agreement between the sender identityindicated in the group message and one of the potential senderidentities and further as a function of a comparison of a current valueof the timekeeping function with data of the second data set. The seconddata set indicates respective time periods with a respective beginningand with a respective end of the time period. The output of the controlsignal is preferably suppressed no later than when this is indicated bythe time periods of the second data set.

Further, it is proposed that the method according to the presentinvention be executed with computer program means on at least oneprocessor.

Further, a program with a program code for executing the methodaccording to the present invention is proposed, if the program code isexecuted on a computer, a processor or a programmable hardwarecomponent.

Further, a processor is provided for a control device for controllingthe output of an alarm, wherein the processor is configured to receive agroup message, which indicates a sender identity of a sender of thegroup message, and further the presence of an alarm state; further, toreceive a data set, which indicates a list with potential senderidentities, as well as further a second data set, which indicates timeperiods, during which an alarm signal shall be outputted, as well asfurther to operate a timekeeping function, and further to output acontrol signal, which indicates a request for outputting an acousticand/or optical alarm signal, as a function of an agreement of the senderidentity indicated in the group message with one of the potential senderidentities and as a function of a comparison of a current value of thetimekeeping function with data of the second data set. The second dataset indicates respective time periods with a respective beginning andwith a respective end of the time period. The processor suppresses theoutput of the control signal preferably no later than when this isindicated by the time periods of the second data set.

Advantages of the control device provided likewise apply to the methodprovided. Likewise, these advantages apply to the processor provided.

Further, a medical device for analyzing physiological patient data orfor monitoring a technical device is proposed, comprising an alarmsignal output unit; an input unit for manual actuation by a user; atleast one interface for receiving at least one signal, which indicatesphysiological measured values of a patient or at least an operatingstate of a device; at least one memory unit for providing a first dataset, which indicates reference values, and for providing a second dataset, which indicates a time period, after the end of which an alarmshall, in principle, be outputted to the alarm signal output unit; atleast one data network interface; at least one processor, wherein theprocessor is configured to detect the presence of an alarm state by acomparison of the physiological measured values or the operating statewith the reference value, and to output a group message, which indicatesthe presence of an alarm state, if the alarm state is detected via thedata network interface, and is further configured to provide atimekeeping function, the processor being further configured to receive,via the data network interface, a status message, which indicates anacknowledgment of the alarm state by the user input, and to perform theoutputting of an alarm signal via the alarm signal output unit aftersending the group message as a function of a current value of thetimekeeping function, of the second data set, which indicates the timeperiod, of the presence of the status message and of the presence of aninput on the input unit.

The operating state is preferably an operating state of a partial deviceat or in the medical device. For example, the medical device is aso-called patient monitor, and the signal indicates which operatingstate is currently given for an ECG electrode connected to the patientmonitor, e.g., whether the ECG electrode is positioned on a human bodyor whether the electrode is not (no longer) positioned on a human body.For example, the medical device is an infusion pump device, which checksa pressure in the corresponding tube system by means of a manometer andderives an operating state herefrom.

The operating state is preferably an operating state of another device,which differs from the medical device. The signal indicates in this casean operating state of an infusion pump device separate from the patientmonitor, e.g., on a patient monitor.

The present invention will be explained in more detail below on thebasis of special embodiments without limitation of the general inventiveidea on the basis of the figures. The various features of novelty whichcharacterize the invention are pointed out with particularity in theclaims annexed to and forming a part of this disclosure. For a betterunderstanding of the invention, its operating advantages and specificobjects attained by its uses, reference is made to the accompanyingdrawings and descriptive matter in which preferred embodiments of theinvention are illustrated.

BRIEF DESCRIPTION OF THE DRAWINGS

In the drawings:

FIG. 1 is a view showing a scenario in a clinical setting;

FIG. 2 is a view showing a medical device as well as a control deviceaccording to the present invention according to a first embodiment;

FIG. 3 is a view showing a control device according to the presentinvention according to a second embodiment as well as a networkparticipant of a second data network;

FIG. 4 is a view showing a medical device according to the presentinvention;

FIG. 5 is a view showing steps of a method for assigning a controldevice to a medical device;

FIG. 6 is a view showing steps for executing the method according to thepresent invention;

FIG. 7a is a schematic view showing a data set;

FIG. 7b is a graphic diagram of time periods;

FIG. 7c is a schematic view showing a data set;

FIG. 7d is a graphic diagram of time periods;

FIG. 8 is a view showing method steps within the framework of a checkingto determine whether a control signal of an alarm signal output unit canreach an alarm signal output unit;

FIG. 9a is a view showing method steps, by means of which the outputtingof a control signal is performed as a function of the presence of astatus message;

FIG. 9b is a view showing a diagram of time periods in connection withthe method steps from FIG. 9 a;

FIG. 10a is a view showing method steps within the framework of achecking to determine whether an acknowledgment of an alarm signal wasperformed by an input by a clinician on a control device, the output ofthe control signal preferably being suppressed;

FIG. 10b is a view showing a diagram of corresponding time periods inconnection with the method steps from FIG. 10 a;

FIG. 11a is a view showing a first time period; and

FIG. 11b is a view showing a second time period.

DESCRIPTION OF THE PREFERRED EMBODIMENTS

Referring to the drawings, FIG. 1 shows a scenario in a clinicalsetting. A patient PT, who preferably lies on a patient positioningdevice in the form of a bed B, is monitored with respect tophysiological data by means of a medical device PM1, which is preferablya patient monitor. In addition or as an alternative to the monitoring ofphysiological data, the device PM1 monitors an operating state ofanother technical device AV, which is, for example, another medicaldevice. The device PM1 preferably monitors an operating state of an ownpartial device TV. The operating state is preferably an operating stateof the partial device TV on or in the medical device PM1. For example,the medical device PM1 is a so-called patient monitor, where a signalBZ1 indicates which operating state is currently given for an ECGelectrode connected to the patient monitor PM1 by means of an interfaceTV1, for example, whether the ECG electrode is positioned on a humanbody or whether the electrode is not positioned (any longer) on a humanbody. For example, the medical device PM1 is an infusion pump device,which checks a pressure in the corresponding tube system of the infusionpump device PM1 by means of a manometer TV1 and derives an operatingstate therefrom.

The operating state is preferably an operating state of another deviceAV, which differs from the medical device PM1. The signal BZ2 indicateshere, e.g., on the patient monitor PM1 an operating state of theinfusion pump device AV that is separate from the patient monitor PM1.

A signal SES, which indicates physiological measured values relative tothe patient PT, is preferably provided by means of at least one sensorSEN when monitoring the physiological data. The device PM1 receives thesignal SES via a corresponding interface.

When monitoring the operating state, the device PM1 receives a datasignal BZ1, BZ2, which indicates an operating state of the device AV orof the partial device TV, from the device AV or from the partial deviceTV. Such an operating state is, for example, a “Ready,” “Not Ready,”“Standby,” “ON,” “OFF” or “ERROR” status.

A processor P1 monitors the physiological measured values or theoperating state and detects, by comparison with at least one presetreference value, a state in which an alarming shall take place in orderto alert a clinician or another hospital staff to the detected state.The device PM1 can preferably output for this the alarm via an alarmsignal output unit WSA1 directly to the device PM1. Such an output inthe direct proximity of the patient PT is possibly disadvantageous,because the patient PT may possibly be disturbed or bothered hereby.Further, it is possible that the door of the patient room is closed in aso-called closed-door scenario, so that the output of an alarm signaldirectly at the device PM1 via the unit WSA1 may not possibly beperceived by the clinician or the hospital staff. Therefore, a door ofthe patient room is at least left open in a clinical setting, but thiscompromises the resting situation of the patient and/or potentiallyexacerbates the hygienic situation.

It is known that the medical device PM1 does not perform the alarmingvia its alarm output unit WSA1 itself, but that the medical device PM1sends a request message ANN to a data network interface DSX of an alarmdevice AG, which is located outside the patient room, via a data networkinterface DS1 via a data network NW. The message ANN represents arequest to perform the outputting of an alarm signal on the alarm deviceAG via the own alarm signal output unit WSAX thereof.

It is further a possible scenario that more than one alarm device AG ispresent in the clinical setting. For example, there are so-called pagersfor physicians; further, e.g., also alarm output devices, which arepositioned in hallways or corridors, as well as further, e.g., alarmoutput devices, which are positioned in a central station room. If thedevice PM1 sent the same request message ANN simultaneously to aplurality of such alarm devices, an alarm signal would possibly beoutputted simultaneously on all such alarm devices. The output of thealarm signals in an acoustic and/or optical form could as a result leadto overtaxing and excessive irritation of the hospital staff Therefore,one goal of the present invention is to ensure the output of an alarm toalarm devices in a coordinated manner, where it should be possible tominimize the number of alarms outputted. Such a solution therefor wouldbe that a medical device PM1 sends a detected alarm state to a centralcoordination unit in the network, which unit then coordinates thedistribution of alarm signal requests to different alarm devices.

FIG. 2 shows the control device SG according to the present inventiontogether with a medical device PM.

The medical device PM is configured essentially like the medical devicePM1 explained above with reference to FIG. 1.

Further special embodiments of the medical device PM will now beexplained in more detail with reference to FIG. 4.

The device PM has an alarm output unit WSA2. The device PM has furtheran input unit ES2 for generating an input signal EGS2 in case ofactuation of the input unit ES2 by a user. The input unit ES2 ispreferably a key, a pushbutton or a touchscreen.

Further, the device PM has an interface SEC for receiving a sensorsignal SES, which indicates physiological measured values of a patient.A physiological measured value is, for example, a heart rate, a bloodpressure or a blood oxygen level of a patient.

A data set DA11 which indicates at least one reference value R, ispresent or provided in a memory unit MEMP. Further, a second data setDA22 is provided, which indicates a first time period TM1 and a secondtime period TM2.

The device PM has further a data network interface DSP as well as aprocessor PR. The processor is set up to operate and provide atimekeeping function TP. The timekeeping function TP corresponds to atimekeeping function T of the control device SG from FIG. 2, which willbe explained in more detail below.

The device PM preferably has a data interface DAS, via which the devicePM receives the signal BZ2, which indicates as a data signal anoperating state of the other device AV. The device PM preferably hasfurther a partial device TV, which provides a signal BZ1, whichindicates an operating state of the partial device TV, as was mentionedabove. By comparing the operating state indicated in one of the signalsBZ1, BZ2, the presence of a state of alarm can then be detected bycomparison with a reference value R. For example, the reference value Ris a list, which indicates operating states in the presence of which astate of alarm is said to be given or shall be detected.

By comparing the physiological measured values received at the interfaceSES and a corresponding reference value R, the processor PR can detectwhether an alarm state is present. If, e.g., the reference value R is athreshold value and a recorded physiological measured value exceeds thereference value or threshold value, the presence of the alarm state isthen detected by the processor PR. An alarm state is given, for example,if the physiological measured values indicate a pulse of the patient andif the maximum pulse as a reference value R is exceeded. Furtherembodiments for detecting states of alarm by comparisons ofphysiological measured values and corresponding reference values areconceivable and understandable to the person skilled in the art.

The detection of a state of alarm on the basis of one of the signalsBZ1, BZ2, which indicate each an operating state, can take place asdescribed above.

The processor PR is further configured to send a first group message BC,which indicates the presence of the alarm state, to additional networkparticipants via the data network interface DSP in the presence of thealarm state or if the alarm state is detected. The group message BC ispreferably a broadcast message BC according to this example. The groupmessage BC contains at least the network identity PMID of the sender PMsending the message BC as well as a data element ALST, which indicatesthe alarm state. The group message BC preferably contains identificationdata PMIDENT, which identify the device PM sending the message BC. Thegroup message BC is sent into a network NW. The data network interfaceDSP is further configured to send or to receive additional messages, asit will be explained in more detail below. The identity PMID may be anetwork address or network identity, e.g., an IP address of the devicePM. As an alternative, the identity PMID is a data element whichunambiguously identifies the device PM.

The group message BC in the sense of this application is a data networkmessage. Such a group message is a data network message, which is sentto one or more network units of a group of network units. The group ofnetwork units is then preferably defined by group identification data,e.g., a multicast address or a quantity of a plurality of respectivedata network addresses of respective network units. A group message inthe sense of this application is consequently a data network message ofthe type of a broadcast message, an anycast message, a multicast messageor one or more unicast messages.

The group message BC is preferably sent to the network units that areindicated by group identification data SGID of the data set DA3.

The device PM preferably has an own alarm output unit WSA2, which can beactuated by the processor PR by means of a control signal STSP foroutputting an alarm signal.

The memory unit MP preferably provides a data set DA3, which indicates alist with network participant identities SGID or network identities ofcontrol devices, which can, in principle, receive the group messages BC.If the data set DA3 is an empty data set, the processor PR can inferthat no control device had logged in before at the device PM by means ofa log-in process and that no control device is consequently actuating orgenerating the outputting of an alarm, so that the processor actuatesthe outputting of an alarm at the device PM itself. The processor PRoutputs for this a control signal STSP to the alarm output unit WSA2 ofthe device PM.

FIG. 2 likewise shows the medical device PM with the group message BC,which is sent via the network NW to a data interface DS of the controldevice SG.

As is shown here in FIG. 2, the control device SG has, according to thepresent invention, an alarm signal output unit WSA itself, via which anoptical and/or acoustic alarm signal can be outputted. Further, as willbe explained later with reference to FIG. 3, it is possible, as analternative, that in a second embodiment, the control device SG11 shownthere does not have the alarm signal output unit itself, but anothernetwork participant MO of another network NW2 has an alarm signal outputunit WSAM. This will be explained in more detail later with reference toFIG. 3 within the framework of the second exemplary embodiment.

An alarm signal output unit in the sense of the patent application is anoutput unit for outputting an optical and/or acoustic warning. An alarmsignal output unit may thus be, for example, an optical display elementand/or an acoustic output element, e.g., a loudspeaker, a buzzer or ahorn.

The control device SG from FIG. 2 has a signaling interface SIS foroutputting a control signal STS, which indicates a request foroutputting an acoustic and/or optical alarm signal. The control deviceSTS preferably contains here the Boolean value 1 for the indication ofthe request.

In the sense of the present application, a control signal may be anelectrical signal, such as a current or a voltage. The control signal ispreferably a data signal for sending via a wired network or a wirelessnetwork.

The control device SG has at least one memory unit MEM. Further, thedevice SG has a processor P, which is configured to operate or provide atimekeeping function T. The timekeeping T may be a so-called stop watch,or else, for example, a usual time function for time measurement. Thetimekeeping function provides the time values TV.

The control device receives the group message BC via the data interfaceDS. The message BC indicates as the sender address the network identityor network address PMID of the sender PM. This network identity is apossibility of a sender identity of the sender. The message BCpreferably indicates, as an alternative or in addition, identificationdata PMIDENT as a sender identity of the sender.

The message BC consequently indicates a sender identity PMID, PMIDENT ofthe sender PM as well as the presence of the alarm state by means of thestatus data element ALST.

The memory unit MEM provides a data set DA1, which indicates a list ALwith potential sender identities PMID, PMIDENT. The potential senderidentities PMID, PMIDENT may be network addresses or network identitiesPMID of senders and/or identification data PMIDENT of senders. Thememory unit MEM has further a data set DA2, which indicates timeperiods, during which an alarm signal shall possibly be outputted. Thesetime periods are preferably indicated by a list TL. The indicated timeperiods have, at least implicitly, a beginning and an end.

The processor P outputs the control signal STS as a function of anagreement of the sender identity PMID indicated in the group message BCwith a sender identity PMID indicated in the first data set DA1.Further, the processor P outputs the control signal STS as a function ofa comparison of a current value TV of the timekeeping function T and ofthe time periods that are indicted in the second data set DA2. This willbe explained in more detail later with reference to FIGS. 7a through 7b.

The control device has further an input unit ES for generating an inputsignal EGS in case of actuation of the input unit ES by a user. Theinput unit ES is preferably a key, a pushbutton or a touchscreen.

The processor P is further configured to receive a status informationSIN, which indicates whether an alarm output unit WSA can be reached bya control signal STS.

The control device SG according to the present invention, which is adevice in the sense of the alarm device AG from FIG. 1, as well as themethod according to the present invention make it possible to executeout the output of an alarm by means of a plurality of alarm devices in acoordinated manner, wherein the alarm outputs can be minimized. Nocentral unit is necessary in the network between the medical device PM1and the alarm output devices AG for outputting an alarm in a coordinatedmanner.

FIG. 7a shows for this once again the data set DA2 in detail with a listTL, which indicates for respective time values TA and TB starting fromthe receipt of a group message and hence implicitly for respective timeperiods whether an alarm signal shall be outputted or not. This ispreferably indicated on the basis of Boolean values 0 and 1. Therespective time values TA, TB consequently indirectly indicate timeperiods starting from the arrival of a first group message BC, duringwhich an alarm signal shall be outputted. FIG. 7b illustrates for thisthese time periods TAR and TBR, which can be determined by applying thetime values TA and TB indicated from the list TL. A timekeeping functionor a stop watch function is started on arrival of the group message BCand an alarm is outputted depending on a time value of the timekeepingfunction as well as on the time values TA, TB. As an alternative, thetimekeeping function is a continuously running timekeeping function, andthe outputting of an alarm is made contingent upon a time value of thetimekeeping function on arrival of the group message BC, a current timevalue of the timekeeping function as well as on the time values TA, TB.

The indicated time period TAR has a beginning time on arrival of themessage BC and an end time at the time TA. The indicated time period TBRhas a beginning time at the time TA and an end time at the time TB.

The alarm signal shall be outputted in this example from the time TA tothe time TB during the time period TBR. An alarm is outputted in thisexample during the time period TBR such that a control signal output forgenerating or requesting an alarm signal is suppressed at the latest atthe end of the time period TBR.

It is clear to a person skilled in the art that the variant ofindicating the time periods TAR, TBR, which is selected here, by meansof the time values TA, TB and the Boolean values 0 and 1 is only anexample for an implementation of the control device according to thepresent invention and of the method according to the present invention.

The advantage of the control device according to the present inventionand of the method according to the present invention is that the medicaldevice PM shown in FIG. 2 must communicate only the presence of thealarm state via the group message BC to alarm devices and controldevices SG and that the alarm devices or control device SG are thencorrespondingly preconfigured in themselves based on their data sets DA2to cause the output of an acoustic and/or optical alarm at very specifictime periods TBR. As a result, a control device SG can consequently beassigned to corresponding alarm classes or device groups in a simplemanner by means of a modification of the corresponding data set DA2, sothat an alarming is not performed by all the control devices SGcommunicating with the medical device PM during equal time periods, butthey can cause the outputting of an acoustic and/or optical alarmsignal, for example, staggered in time, during time periods TBR of theirown.

FIG. 7c shows an alternative embodiment of the data set DA2 with a listTL1. The list TL1 contains here, for a first alarm type ATY1, data thatindicate time periods, as was explained above with reference to FIGS. 7aand 7b . Further, the list TL1 contains data for a second alarm typeATY2, and these data indicate additional time periods concerning analarm output. The time periods TAC, TAD are shown in FIG. 7d . Thisembodiment of the present invention is advantageous, because it is thuspossible to make the output of an alarm signal on the control device SGalso contingent upon the kind of alarm type indicated by a receivedgroup message BC, As a result, the control device SG from FIG. 2 mayconsequently have different alarming characteristics for different typesof alarm. An alarm is outputted in this example during the time periodTAG such that a control signal output to generate or request an alarmsignal is suppressed no later than at the end of the time period TAC.

The control device according to the present invention preferably uses adata element ATY provided in a group message, see FIG. 6 with the groupmessage BC11, which will be explained in more detail later, in order toinfer a very specific type of alarm. The control device according to thepresent invention preferably has an additional provided data set, whichindicates respective types of alarm for respective values of the dataelement ATY, e.g., “high blood pressure alarm,” “pulse rate alarm” orsimilar types of alarm.

FIG. 5 shows steps of a log-in process, with which a control device SGfrom FIG. 2 can log in or register in a medical device PM from FIG. 4 inorder to then be assigned to the medical device PM.

A request message REQ1 is first sent by the control device SG to thedevice PM, which has as the target address the network identity PMID ofthe device PM; further, it has as the sender address the networkidentity SGID of the control device SG; further, certificate data Z1 aswell as further a data element FKT, which indicates a functionality ofthe control device SG.

After receiving the request message REQ1 at the device PM, the device PMchecks in a step SC1 whether the indicated functionality FKT of thesender SG of the request message REQ1 is permissible. If yes, there is afurther branching to a step SC2. If this is not the case, a rejectionmessage NACK is sent back to the control device SG. It is checked instep SC2 on the basis of the certificate data Z1 whether a log-in orregistration of the control device SG on the device PM is permissible.If not, a rejection message NACK is sent to the control device SG. Ifthis is permissible, the identity SGID of the control device SG loggingin is stored in the device PM in a data set DA3. As a result, the devicePM from FIG. 4 stores information on control device SG that are loggedin to it for controlling the output of an alarm. The device can possiblyinfer from this that the outputting of an alarm can be brought about, inprinciple by outputting an alarm by sending a group message BC.

If the control device SG has successfully logged in to the device PM, anacknowledgment message ACK is sent to the control device SG in a stepSC4. This message ACK contains the network identity SGID of the controldevice as a target address and the network identity PMID of the devicePM as a sender address. The network identity PMID can then be stored asa potential sender identity in the memory MEM of the device PM. Themessage ACK preferably contains identification data PMIDENT, whichunambiguously identify the device PM, and is then preferably stored as apotential sender identity in the memory MEM of the device PM.

Then, after receipt of the acknowledgment message ACK in the controldevice SG, either the network identity PMID of the device PM or theidentification data PMID of the device PM are stored in step SC5 in thedata set DA1, preferably by means of a list AL, as was already mentionedin FIG. 2. As a result, it is then consequently known to the controldevice SG to which group message BC of which medical device PM it mustrespond with which sender identity PMID or PMIDENT for the purpose ofoutputting an alarm.

FIG. 6 shows method steps for executing the method according to thepresent invention and for explaining the mode of operation of thecontrol device according to the present invention in more detail. It isobvious to the person skilled in the art that the steps described withreference to FIG. 6 can be executed by respective processors with theuse of additional, above-mentioned partial devices.

In a method step SC11, the medical device PM checks whether or not analarm state can be detected on the basis of the physiological measuredvalues SES and the reference values R. In case an alarm state is to bedetected, the process is branched in the next step SC12 to a method stepSC13, in which the medical device PM itself preferably starts its owntimekeeping function TP, whose function will be explained in more detailbelow.

In a step SC14, the device PM then sends the group message BC, whichindicates the identity of the sender, e.g., in the form of the networkidentity PMID. In the preferred case in which the network identity PMIDitself is used as the sender identity, the group message BC has furthersender identity data PMIDENT.

The group message has further a data element ALST, which indicates thepresence of the alarm state.

The first group message is preferably given in the form of analternative first group message BC11, which further contains, comparedto the group message BC, a data element ATY, which indicates an alarmtype.

The control device SG preferably starts its timekeeping function T,which is a stop watch function in this example, in a step SC15 afterreceipt of the group message BC, BC11.

In a next step SC16, the device SG checks whether the sender identityPMID, PMIDENT of the first group message BC, BC11 agrees with apotential sender identity PMID, PMIDENT from the data set DA1, see FIG.2. A checking is consequently performed to determine whether the firstgroup message BC, BC11 originates from a medical device PM, to which thecontrol device SG is assigned. It is made possible hereby that thedevice PM does not have to address any explicit control devices in themessage BC, BC11 in order to initiate an alarm output to such controldevices SG only.

If the checking performed in step SC16 has a positive result, it ischecked in a next step SC17 whether the alarm state ALST is given orindicated.

If yes, it is determined in a next step SC18 by comparing a value TV ofthe timekeeping function T and the time periods indicated in the dataset DA2 whether or not a control signal STS shall be outputted at themoment or currently.

In case no control signal STS shall be outputted, the process isbranched back in a next step SC19 to the step SC18. However, if acontrol signal STS shall be outputted, the process is branched to amethod step SC20, in which the control signal STS is outputted.

The process is then branched back from step SC20 to step SC18 in orderto check continuously whether the control signal STS shall be outputted.

FIG. 8 shows further signals as well as further method steps, on thebasis of which further functionalities are brought about in interactionwith the method steps SC18, SC19 as well as SC20 described hitherto withreference to FIG. 6. It is made possible hereby that a checking isperformed to determine whether the outputting of the control signal STScan reach an alarm signal output unit PSA at all.

The status information SIN shown in FIG. 2 can be used to check whetheror not the alarm output unit WSA according to FIG. 2 is capable ofoutputting an alarm signal at all.

The status information SIN preferably indicates here an operating stateof the unit WSA; as an alternative, the status information SIN indicateswhether the unit WSA is connected to the control device SG at all.

Thus, an operating status of the unit WSA is detected or determined inthe method step SC19A. If the status of the output unit WSA indicated bythe status information is such that the control signal will be able tosuccessfully reach the unit WSA through the control signal, the processproceeds further to method step SC20, in which the outputting of thecontrol signal STS is brought about. If the control signal STS cannotsuccessfully reach the output unit WSA, the process is branched off to amethod step SC19 a 2, in which the method is interrupted.

A first status message ACK1_1 is sent in a method step SC21 to thesender PMID that was the sender PMID of the group message BC. The index“1_” following “ACK” indicates here in this example that this is a firststatus message or a status message of a first type. The further, lastindex “1” indicates that the message was sent by a first control device.The status message ACK1_1 preferably has a data element ATY, which wasdescribed before with reference to the message BC11 according to FIG. 6.The type of alarm, to which the status message applies, is indicated bythe data element ATY. As a result, the individual messages, such as thegroup message BC11 and the status message ACK1_1, can be used each forcertain types of alarm separately and a distinction can thus be madebetween different types of alarm.

The status message ACK1_1 informs the sender PM of the group message BCthat an alarm output unit WSA can be successfully actuated and that analarm is thus outputted.

FIGS. 9a and 9b show additional signals as well as additional methodsteps, on the basis of which additional functionalities can be broughtabout in interaction with the method steps SC18, SC19 as well as SC20described hitherto with reference to FIG. 6. It is clear to the personskilled in the art that a combination of the method steps according toFIG. 9a with those according to FIG. 8 is also possible, so thatadditional functionalities can be obtained.

FIG. 9a shows an additional method step SC19B. The control device SGreceives via its data network interface a first status message, which isa group message BC2 in this case, which indicates in a data elementSTSGX whether another control device is successfully actuating an alarmsignal output unit. An aforementioned medical device PM can analyze, forexample, by analyzing a first status message ACK1_1 from FIG. 8, thatanother control device is successfully actuating an alarm signal outputunit and then initiate the sending of a first status message in the formof the group message BC2. The group message BC2 preferably has a dataelement ATY for indicating a certain type of alarm, as was explained inmore detail above with reference to FIGS. 6 and 8.

As an alternative to a first status message in the form of the groupmessage BC2, a first status message ACK1_2 sent directly from anothercontrol device—with a corresponding identity SGID2—can also be receivedat the control device SGID, which status message likewise indicates thatthe control device with the identity SGID2 is successfully performingthe outputting of an alarm signal.

The output of the control signal STS can then be made contingent in themethod step SC19B on whether the data element STSGX indicates that analarm signal is already being successfully outputted by another controldevice. If so, no control signal STS is outputted at the control deviceSG itself; therefore, the process is not branched off to the method stepSC20. This is advantageous, because in case another control device isalready outputting the alarm signal, the control device SG itself willthen stop its own actuation STS for outputting an alarm signal.

If the control device SG later receives a second status message in theform of a group message BC3, which indicates by means of a data elementSTSGX that the other control device is no longer performing an actuationof an alarm signal output, a decision is then made in step SC19B thatthe process is nevertheless to be branched to step SC20, and the controlsignal STS is outputted in step SC20. The group message BC3 preferablyhas a data element ATY for indicating a certain type of alarm, as it wasexplained in more detail above with reference to FIGS. 6 and 8.

As an alternative to the second status message in the form of the groupmessage BNC3, a second status message NACK1_2 sent directly by anothercontrol device, with a corresponding identity SGID2, which likewiseindicates that the other control device with the corresponding identitySGID2 is no longer performing the outputting of an alarm signal, canalso be received at the control device SGID. The status message NACK1_2preferably has a data element ATY for indicating a certain type ofalarm, as it was explained in more detail above with reference to FIGS.6 and 8.

These possibilities of control signal output, which were discussed withreference to FIG. 9a , are illustrated in FIG. 9b in more detail. Timeperiods up to the times TA and TB, at which the control device SG2 shalloutput the alarm signal, are indicated for another control device SG2being assumed here, which has the above-mentioned identity SGID2.

With the beginning of the output of the alarm signal, the control deviceSG2 sends its first status message ACK1_2, which is possibly receiveddirectly by the control device SG. As an alternative to this, themedical device PM receives the status message ACK1_2 and then sends astatus message BC2, as it was explained above.

Even though the data sets being stored in the memory unit of the controldevice SG indicate in themselves that a control signal is to beoutputted starting from the time TA to a time TC for requesting theoutput of an alarm signal, the control unit SG can nevertheless suppressits output of the control signal SCS in the manner described above withreference to FIG. 9a from the time TA to the time TB, because it isinformed that the other control device SG2 is already performing analarm signal output based on the first status message ACK1_2, BC2. Theoutput of an alarm signal is therefore suppressed on the control deviceSG from the time TA to the time TB.

Since the control device SG2 sends the above-described second statusmessage NACK1_2 at the time TB and either this second status messageNACK1_2 or a second status message sent by the medical device PM in theform of the group message BC3 is received at the control device SG, thecontrol device SG will still nevertheless output a control signal forrequesting the output of an alarm signal starting from the time TB up tothe time TC. The output of the control signal is suppressed no laterthan at the end of the time period that ends with the time TC.

FIGS. 10a and 10b show additional signals as well as additional methodsteps, on the basis of which additional functionalities are broughtabout in interaction with the method steps SC18, SC19 as well as SC20described hitherto with reference to FIG. 6. It is clear to a personskilled in the art that a combination of the method steps according toFIG. 10a with those according to FIG. 8 and/or according to FIG. 9a isalso possible, so that additional functionalities can be obtained.

FIG. 10a shows additional method steps, by means of which the possiblepresence of an input signal which indicates an acknowledgment of analarm by a user can be taken into account.

The control device shown in FIG. 2 has an input interface ES forreceiving an input signal EGS, which indicates an acknowledgment of thealarm signal by a user. The processor P can then check, if the inputsignal EGS is present, by the step SC19C according to FIG. 10a , whetheran input was made by a user. If not, the alarm was not acknowledged orconfirmed by a user, so that the control signal STS continues to beoutputted in the course of the step SC20.

If, however, the alarm was acknowledged, so that the input signal EGS ispresent, the process is branched off in step SC19C to the step SC19D, inwhich a status message ACK2_1 is sent. This status message ACK2_1indicates in a data element EGST that an acknowledgment of the alarm wasperformed or detected due to an input by a user on the control deviceSG. The status message ACK2_1 preferably has a data element ATY forindicating a certain type of alarm, as it was explained in more detailabove with reference to FIGS. 6 and 8.

This information or the data element EGST can then be analyzed by theaforementioned medical device PM or the processor PR thereof in order toaffect the output of an alarm signal on the medical device PM itself orelse on other control devices.

FIG. 10b illustrates in this connection the output of a control signalfor requesting the output of an alarm signal on the device SG, theoutput of the control signal STS being suppressed until the time periodTB in the presence of the input signal EGS. If there is no input signalEGS, the output of the control signal is suppressed no later than at theend of the time period that ends at the time TB. Further, a third statusmessage ACK2_1 is also sent at the time at which the input signal EGS ispresent. This third status message ACK2_1 can be sent to the medicaldevice PM or directly to other control devices. The device PM can thenperform the sending of a third status message in the form of a groupmessage BC4 when receiving the third status message ACK2_1.

In a preferred embodiment, the control device SG receives from anothercontrol device a third status message ACK2_X, which indicates in a dataelement EGSX that an input of a user is present as an acknowledgment ofthe alarm at the sender SGXID. The device SG preferably receives thisinformation by means of a group message BC4 of the medical device PM.The status message ACK2_X preferably contains a data element ATY foridentifying a certain type of alarm, as it was explained in more detailabove with reference to FIGS. 6 and 8.

The information in the form of the data element EGSX can then be usedwithin the framework of step SC19 to suppress the output of the controlsignal based on the indicated acknowledgment of the user on the controldevice SG and not to branch off the method to the method step SC20.

FIG. 3 shows an alternative control device SG11, which has essentiallythe same configuration as the control device SG in FIG. 2. Differencesbetween the control devices SG and SG11 will now be explained.

The control signal or signaling interface IS is configured in thecontrol device SG11 as a second data network interface DS2, so that thecontrol signal STS2 is sent as a data signal via a second data networkNW2 to a mobile participant. It is possible as a result that the controldevice SG11 assumes a gateway functionality between the aforementionedfirst network NW and the second network NW2. The control signal STS2 isconsequently sent to a mobile device MO, which has an alarm signaloutput unit WSAM of its own. Further, the mobile unit MO as an alarmoutput device has a data interface DSM to the network NW2.

Further, the mobile unit MO has an input interface ESM for receiving aninput signal EGSM, which is sent via the network NW2 to the device SG11.Further, the mobile part MO is configured to send a status signal SINMrelative to the alarm output unit WSAM to the device DS2 via the networkNW2.

If the mobile part MO receives the control signal STS2, it outputs analarm signal via its alarm signal output unit WSAM.

The processor P of the device SG11 controls the output of the controlsignal STS2 taking into account the signals EGSM, SINM now received viathe interface DS2 in the manner described above within the framework ofthe first exemplary embodiment.

The control device SG11 preferably has in its memory unit MEM2 a dataset DA20, in which a list ML with identities of network participants ofthe second data network NW2 is indicated. As a result, the controldevice SG11 has information on which network participants MO of thesecond data network NW2 it must send the control signal STS2.

Further aspects of the medical device PM will be explained now in moredetail with reference to FIG. 4. The device PM has the data networkinterface DSP, which is configured to send the different group messagesBC, BC11, BC2, BC3, BC4. Further, the different status messages ACK1_1,ACK1_2, ACK2_1, NACK1_2, ACK2_X can be received via the data networkinterface DSP. These different messages BC, BC11, BC2, BC3, BC4, ACK1_1,ACK1_2, ACK2_1, NACK1_2, ACK2_X were explained in more detail above withreference to the preceding figures.

The processor PR now analyzes received status messages ACK1_1, ACK1_2,ACK2_1, NACK1_2, ACK2_X in the above-described manner and generatesdepending on this the messages BC2, BC3, BC4 to be outputted.

A status message ACK1_1, ACK1_2, ACK2_1, NACK1_2, ACK2_X is nowpreferably taken into account only if the sender address or the networkidentity of the sender of the status message ACK1_1, ACK1_2, ACK2_1,NACK1_2, ACK2_X agrees with a network identity SGID of the data set DA3.

A first time period TM1 as well as a second time period TM2 areidentified in the data set DA22.

These time periods are explained in more detail in FIG. 11a and in FIG.11b and are to be considered corresponding to FIGS. 2, 3 and 4.

FIG. 11a shows a time curve starting from a time TAL, at which a stateof alarm is detected by the processor PR of the device PM. The groupmessage BC explained in more detail above is sent at this time by thedevice PM.

The purpose of the first time period TM1 is that the processor PR of thedevice PM can decide whether it should possibly perform the output ofthe control signal STSP itself to the own warning signal or alarm outputunit WSA2.

The processor PR therefore waits for the time period TM1 until the timetmax_I whether a first status message ACK1_1 described above in detailis sent by a control device back to the device PM. If this first statusmessage ACK1_1 is present until the end of the time period TM1, theprocessor PR does not output the control signal STSP to the alarm outputunit WSA2. If, however, no such first status message is present from acontrol device until the time tmax_I after the end of the time period orthe time period TM1, it can be inferred that an alarming at the devicePM itself could be necessary. Therefore, the control signal STSP is thenoutputted by the processor PR to the alarm output unit WSA2.

FIG. 11b further shows an alarming characteristic in a second variant inthe case in which a third status message ACK2_1, ACK2_X was sent by thecontrol device to the device PM after the alarming time TAL, and thisthird status message ACK2_1, ACK2_X indicates in a data element in theabove-described manner that a user has acknowledged the alarm at thecontrol device sending the message. Since an alarm output may besuppressed on other control devices or on the control device that hasreceived the acknowledgment, it is, however, possibly necessary to checkwhether the user, who has acknowledged the alarm and has thuscontributed to the suppression of the additional alarm signals, hasindeed reached the medical device PM to check the patient's status, theoutput of an alarm signal is therefore controlled at the device PMitself depending on the second time period or the second time periodTM2. If the second time period TM2 ends starting from the time at whichthe third status message ACK2_1, ACK2_X is received until a timetmax_II, so that no input signal EGS2 of the input unit ES2 of thedevice PM is present, the control signal STSP is then outputted by theprocessor PR to the alarm output unit WSA2. It is ensured hereby thatthe alarm output unit WSA2 will then perform an alarming at least at themedical device PM.

However, if an input of the user on the input unit ES2 of the device PMis detected by the processor PR due to the presence of the input signalEGS2 beginning from the receipt of the third status message ACK2_1,ACK2_X during the time period TM2, no control signal STSP is outputtedto the alarm output unit WSA2 after the end of the time period TM2 atthe time tmax_II.

The embodiments SG, SG11 of the control device according to the presentinvention, which were described with reference to FIGS. 2 and 3, may, inturn, also be medical devices SG, SG11 with additional functionalities.

Even though some aspects were described in connection with a device, itis obvious that these aspects also represent a description of thecorresponding method, so that a block or a component of a device mayalso be considered to be a corresponding method step or as a feature ofa method step. Analogously to this, aspects that were described inconnection with or as a method step also represent a description of acorresponding block/step or detail or feature of a corresponding device,or that the device or the corresponding computer is configured toexecute the method step.

The processor provided shall be considered to be at least one computer.The implementation of the at last one computer may also be achieved by acombination of a plurality of computers, preferably by using software inconjunction with hardware. Depending on certain implementationrequirements, exemplary embodiments of the present invention may beimplemented in hardware and/or in software. The implementation may beachieved with the use of a digital storage medium, for example, a floppydisk, a DVD, a Blu-Ray disk, a CD, a ROM, a PROM, an EPROM, an EEPROM ora FLASH memory, a hard drive or another magnetic or optical memory, onwhich electrically readable control signals are stored, which can or dointeract with a programmable hardware component such that the respectivemethod is executed.

A programmable hardware component may be formed by a processor, acomputer processor (CPU=Central Processing Unit), a graphics processor(GPU=Graphics Processing Unit), a computer, a computer system, anapplication-specific integrated circuit (ASIC=Application-SpecificIntegrated Circuit), an integrated circuit (IC=Integrated Circuit), aone-chip system (SOC=System on Chip), a programmable logic element or afield-programmable gate array with a microprocessor (FPGA=FieldProgrammable Gate Array).

The digital storage medium may therefore be machine- orcomputer-readable. Some exemplary embodiments consequently comprise adata storage medium, which has electronically readable control signals,which are capable of interaction with a programmable computer system orwith a programmable hardware component such that one of the methodsbeing described here is executed. An exemplary embodiment is thus a datastorage medium (or a digital storage medium or a computer-readablemedium), on which the program for executing out the method beingdescribed here is recorded.

Exemplary embodiments of the present invention may be implemented, ingeneral, as a program, firmware, computer program or computer programproduct with a program code or as data, wherein the program code or thedata is or are active to the effect that they execute one of the methodswhen the program runs on a processor or on a programmable hardwarecomponent. The program code or the data may also be stored, for example,on a machine-readable medium or data storage medium. The program code orthe data may be present, among other things, as source code, machinecode or byte code as well as other intermediate codes.

Another exemplary embodiment is further a data stream, a signal sequenceor a sequence of signals, which data stream or sequence represents theprogram for executing one of the methods being described here. The datastream, the signal sequence or the sequence of signals may beconfigured, for example, to the effect that they can be transferred viaa data communication link, for example, over the Internet or anothernetwork. Thus, exemplary embodiments also include signal sequencesrepresenting data, which are suitable for sending over a network or adata communication link, wherein the data represent the program.

A program according to an exemplary embodiment may implement one of themethods during its execution, for example, by reading memory locationsor by writing a datum or a plurality of data in these, whereby switchingoperations or other processes are possibly elicited in transistorstructures, in amplifier structures or in other electrical, optical,magnetic components or in components operating according to anotherprinciple of operation. By reading a memory location, values, sensorvalues or other information can correspondingly be detected, determinedor measured by a program. A program can therefore detect, determine ormeasure variables, values, measured variables and other information byreading one or more memory locations as well as bring about, elicit orexecute an action as well as actuate other devices, machines andcomponents by writing in one or more memory locations. While specificembodiments of the invention have been shown and described in detail toillustrate the application of the principles of the invention, it willbe understood that the invention may be embodied otherwise withoutdeparting from such principles.

APPENDIX Acknowledgment message ACK, ACK1 1, ACK1 2, ACK2 1, ACK2 XAlarm device AG List AL, TL, ML Status element ALST Request message ANNAlarm type ATY Device AV Bed B Group message BC, BC11, BC2, BC3, BC4Operating state signal BZ1, BZ2 Data set DA1, DA2, DA3, DA11, DA22, DA20Data interface DAS Signaling interface DS, SIS Data network interfaceDS1, DS2, DSP, DSX, DS Input signal EGS, EGS2, EGSM Input unit ES, ES2,ESM Data element FKT Memory unit MEM, MEM2, MEMP Mobile unit MORejection message NACK, NACK1 2 Data network NW, NW2 Patient PTProcessor P, P1, PR Medical device PM, PM1 Sender identity PMID, PMIDENTReference value R Request message REQ1 Method step SC1, . . . , SC5,SC11, . . . SC21 Sensor interface SEC Sensor SEN Sensor signal SESControl device SG, SG11 Network identity SGID, SGID2 Status informationSIN, SINM Control signal STS, STS21, STSP Data element STSGX, EGST, EGSXTimekeeping function T, TP Time TA, TB, TC, TAL, tmax I, tmax II Timeperiod TAR, TBR, TAC, TAD, TM1, TM2 Time value TV Alarm signal outputunit WSA, WSA1, WSA2, WSAM, WSAX Certificate data Z1

What is claimed is:
 1. A control device for controlling an alarm output,the control device being a part of a network unit, the control devicecomprising: a data network interface connected to a data network andbeing configured to receive a group message via the data network, whichgroup message is addressed and sent to a plurality of network unitsconnected to the data network, the plurality of network units to whichthe group message is addressed and sent including the network unit ofwhich the control device is a part and which group message indicates asender identity identifying a sender of the group message and whichfurther indicates a presence of an alarm state; a signaling interfacefor outputting a control signal, which control signal indicates arequest for an output of an acoustic and/or optical alarm signal; atleast one memory unit to provide a first data set, which indicates alist with potential sender identities, as well as further a second dataset, which indicates one or more time periods, during which an alarmsignal shall be outputted; an alarm signal output unit for outputting anoptical and/or acoustic signal; an input interface for receiving aninput signal, which indicates an acknowledgment of the alarm signal by auser; and at least one processor configured to operate a timekeepingfunction, with which a start of timekeeping is started on arrival of thegroup message at the network unit of which the control device is a part,the timekeeping comprising monitoring a time duration from the start ofthe timekeeping to a current time duration value, and to output thecontrol signal via the signaling interface to the alarm signal outputunit as a function of an agreement of the sender identity indicated inthe group message with one of the potential sender identities of thefirst data set as well as further as a function of a comparison of thecurrent time duration value of the timekeeping of the timekeepingfunction with the one or more time periods data of the second data set,wherein the processor is further configured to suppress the output ofthe control signal and further to send a status message, which statusmessage indicates the acknowledgment of the alarm signal by the user, tothe sender of the group message via the data network interface in thepresence of the input signal.
 2. A control device in accordance withclaim 1, wherein the processor is configured to suppress the output ofthe control signal no later than when suppression of the output of thecontrol signal is indicated by the one or more time periods of thesecond data set.
 3. A control device in accordance with claim 1,wherein: the group message has further a data element that indicates atype of an alarm state; the second data set further indicates anassignment of the time periods to types of alarm states; and theprocessor is configured to take into account the type of alarm stateindicated in the group message in the course of the comparison.
 4. Acontrol device in accordance with claim 1, wherein the processor isfurther configured: to check, on the basis of a status information,whether or not the control signal can reach an alarm signal output unit;and to send a status message, which status message indicates asuccessful actuation of the alarm signal output unit, to the sender ofthe group message via the data network interface in case of a positiveresult of the checking and in case of a beginning of the output of thecontrol signal.
 5. A control device in accordance with claim 1, wherein:the data network interface is further configured to receive a statusmessage via the data network, which status message indicates whetheranother control device, that is a part of another data network unit ofthe plurality of data network units to which the group message isaddressed and sent, is currently successfully actuating an alarm signaloutput unit associated therewith; and the processor is furtherconfigured to output the control signal via the signaling interface as afunction of a presence of the status message.
 6. A control device inaccordance with claim 1, wherein: the data network interface is furtherconfigured to receive a status message via the data network, whichstatus message indicates that another control device, that is a part ofanother data network unit of the plurality of data network units towhich the group message is addressed and sent, has detected anacknowledgment of an alarm signal by a user; and the processor isfurther configured to suppress the output of the control signal in thepresence of the status message.
 7. A medical device for analyzingphysiological patient data or for monitoring an operating state of atleast one device, the medical device comprising: an alarm signal outputunit; an input unit for manual actuation by a user; at least oneinterface for receiving at least one signal, which signal indicatesphysiological measured values of a patient or at least one operatingstate of the at least one device; at least one memory unit for providinga first data set, which first data set indicates at least onephysiological or operating state reference value, and a second data set,which second data set indicates a time period, after the end of whichtime period an output of an alarm shall take place at the alarm signaloutput unit; at least one data network interface connected to a datanetwork; and at least one processor configured to detect the presence ofan alarm state by comparing the physiological measured values or theoperating state with the physiological or operating state referencevalue and to output a group message to data network via the at least onedata network interface, which group message is addressed to and sent toa plurality of network units connected to the data network, theplurality of network units including a network unit with a controldevice, configured to generate and send a status message via the datanetwork for receipt by the at least one data network interface, andwhich group message indicates the presence of the alarm state, if thealarm state is detected and to provide a timekeeping function, withwhich a start of timekeeping is started upon detecting the alarm stateand a time duration is monitored from the start of the timekeeping to acurrent time duration value, wherein the processor is furtherconfigured: to receive a status message from one of the network units ofthe data network via the at least one data network interface, whichstatus message indicates an acknowledgment, at said one of the networkunits, of the alarm state by a user input; and to output an alarmsignal, via the alarm signal output unit, after sending the groupmessage, as a function of a current value of the timekeeping function,as a function of the time period of the second data set, which seconddata set indicates the time period, as a function of the presence of thestatus message and as a function of the presence of an input on theinput unit.